Blocking ip addresses for incoming traffic with Hub Two

[#1]

There doesn't seem to be a way to do this. Please tell me I am wrong.

[#2 · Accepted solution]

It is unlikely that any ISP supplied router can do that with standard firmware.

You might be able to achieve it with a different home router with perhaps DD-WRT or OpenWRT firmware installed.

You can certainly do it with pfSense or OPNsense software running on an old or low powered PC acting as a router.

My setup, by default, blocks all external IP addresses accessing any opened port, and I then specifically whitelist external IPs that I wish to permit connections from.

.

[#3]

Thanks for confirming and the tips. I've just switched from a 4G ASUS router where it was quite straightforward to do this, to the hub2 now that we have fibre. Guess I just assumed that this was a fairly standard firewall feature. Maybe I'll just use the Plusnet hub as the modem and go back to the Asus as the router.

[#4]

If you’re looking to block unwanted IPs accessing your system through open ports you’ve a job for life….

[#5]

---

@yebaws wrote:

Maybe I'll just use the Plusnet hub as the modem and go back to the Asus as the router.

---

That sounds like a good plan, assuming that you can configure the Asus's WAN port for PPPoE (which I'm sure you can !)

.

[#6]

---

@Champnet wrote:

If you’re looking to block unwanted IPs accessing your system ... ... you’ve a job for life….

---

Not if you've automated it !

My router downloads huge lists of both IPv4 and IPv6 known malicious IP addresses, every hour, and updates the firewall rules to block anything incoming from those sources.

Similarly, every hour, the router also downloads tens of thousands of URLs for blocking adverts and other unwanted junk.

It is also possible to retrieve anti-virus definitions hourly, so you can scan incoming files for viruses and malware, as they're received by the router and prevent anything infected from being passed to PCs or other devices on the home network.

.

[#7]

For anyone else interested in installing third party firmware on domestic router hardware to obtain advanced features,

this is quite a straightforward video to get an understanding as to what is involved -

YouTube - You're doing routers wrong... Use OpenWRT instead! 

Or if you wanted something a bit more advanced, then here is a fun guide to installing pfSense on low power firewall hardware -

YouTube : your home router SUCKS!! (use pfSense instead) 

or how to repurpose an old PC as a pfSense firewall -

YouTube : Your Router Sucks. Build Your Own Instead! 

.

[#8]

@outcast  All system security is reactive not proactive so most of your setup is already out of date and a waste of resources.